Google 2-Factor Authentication Backup Codes Exposed in Database Breach

In a shocking revelation, a technology company has left an internal database exposed on the internet without a password, revealing sensitive information including one-time passcodes for Google's two-factor authentication (2FA) system. The database, belonging to YX International, was discovered by security researcher Inurag Sen and contained logs of text messages sent to users, including 2FA codes and password reset links.

The exposed database included the contents of text messages sent to users, which could have granted unauthorized access to online accounts on platforms such as Facebook, Google, and TikTok. The database was growing in size by the minute, with YX International claiming to send over 5 million SMS text messages daily.

Two-factor authentication is a crucial security measure that adds an extra layer of protection against online account hijacks. When enabled, users receive a one-time code via SMS or email, which they must enter along with their password to gain access to their account. The exposed database contained these codes, making it possible for unauthorized parties to gain access to user accounts.

It is unclear who owns the database or who should be reported to regarding the security lapse. Sen shared details of the exposed database with TechCrunch to help identify its owner and report the breach.

YX International manufactures cellular networking equipment and provides SMS text message routing services, including SMS routing, which helps deliver time-critical messages across various regional cell networks and providers.

The incident highlights the importance of protecting sensitive data, particularly 2FA codes that can grant access to user accounts. Google's two-factor authentication system relies on these codes to ensure secure login processes. The exposure of these codes could have serious consequences for users who rely on this security measure.

In conclusion, the exposed database breach serves as a reminder of the importance of securing sensitive data and implementing robust measures to prevent unauthorized access. It is essential that companies like YX International take immediate action to rectify the situation and ensure the protection of user data.

Google 2 factor authentication backup codes